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Top Stories 

• Four doctors, an attorney, and several clinic employees were among the 1 1 allegedly 
involved in handing out prescription drugs for cash throughout clinics across several 
Indiana counties. - WTHR 13 Indianapolis (See item 18 ) 

• Crews reached 59 percent containment July 27 of the 250,514-acre Carlton Complex Fire 
which has destroyed an estimated 300 homes in Washington, and firefighters also reached 
25 percent containment of the Chiwaukum Complex Fire in Chelan County, Washington, 
which has burned 12,320 acres. - KCPQ 13 Tacoma (See item 19 ) 

• A man from England was indicted July 24 for offenses that enabled him to access sensitive 
information belonging to more than 100,000 federal government employees by breaching 
the systems of several U.S. government entities. - Softpedia (See item 20 ) 

• One person was killed and at least 13 others were injured July 27 when a lightning bolt 
struck the water and beach at Venice Beach in Los Angeles, California. - CNN (See item 

31 ) 
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Energy Sector 



1. July 28, MLive.com - (Michigan) DTE Energy reports 160,000 power outages after 
string of Metro Detroit storms. About 160,000 DTE Energy customers lost power 
July 27 after a series of storms that produced hail and heavy winds throughout the 
Metro Detroit region. 

Source: 

http://www.mlive.com/news/detroit/index.ssf/2014/07/dte energy reports 160000 po 
we.html 

2. July 27, WHAS 11 Louisville - (Kentucky) LG&E crews busy restoring power after 
Saturday’s severe storms. Thunderstorms which produced hail and strong winds 
knocked out power to over 21,000 Louisville Gas & Electric customers in Kentucky 
July 26. 

Source: http://www.whas 1 1 .com/weather/Storms-roll-through-Kentuckiana-down- 
powerlines-trees-268755161.html 

3. July 27, Associated Press - (Arizona) Monsoon storm leaves areas of metro Phoenix 
without power. Utility crews in Arizona worked to restore service July 27 to more than 
33,000 people across Phoenix after a severe monsoon storm July 26 knocked down 
trees and utility poles. 

Source: http://ktar.com/22/1753712/Monsoon-hits-Vallev-causes-power-outages 

4. July 27, Salt Lake Tribune - (Utah) Fuel tank caught fire at Weber County pump 
station. A pump station near the Great Salt Lake in Weber County was evacuated July 
26 when a 1,200-gallon fuel tank accidentally caught fire. Firefighters stayed on site for 
about 2 hours after they contained the fire to the original fuel tank and let the fuel 
inside the tank cool down without further incident. 

Source: http://www.sltrib.com/sltrib/news/58229487-78/fire-tank-county-fuel.html.csp 

5. July 25, Associated Press - (Alaska) BP reaches settlement on oil-related spills. BP 
Exploration Alaska agreed to settle a complaint with federal and State governments and 
pay a $450,000 penalty July 25 over four oil-related spills on Alaska’s North Slope 
from 2007 to 2011. 

Source: http://www.mercedsunstar.com/2014/07/25/3766095/bp-reaches-settlement-on- 
oil-related.html 



For another story, see item 20 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 



Nothing to Report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. July 25, U.S. Securities and Exchange Commission - (National) Citigroup business 
unit charged with failing to protect confidential subscriber data while operating 
alternative trading system. New York-based LavaFlow Inc., agreed July 25 to pay $5 
million to settle U.S. Securities and Exchange Commission charges that the Citigroup 
business unit failed to safeguard the confidential trading data of its subscribers when it 
allowed an affiliate to access the LavaFlow-operated alternative trading system (ATS). 
Source: 

http://www.sec.gov/News/PressRelease/Detail/PressRelease/13705423711 14#.U9Zy6fl 
dVKI 



For another story, see item 20 
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Transportation Systems Sector 

7. July 28, KPIX 5 San Francisco - (California) Westbound 1-580 lanes reopen in 
Livermore after big rig crash spills bananas, causes major delays. Westbound lanes 
of Interstate 580 in Fivermore were closed for several hours July 28 after a semi-truck 
carrying about 45,000 pounds of bananas and other fruits crashed into a dump truck 
already involved in another accident. The semi-truck overturned and caught fire from 
leaked fuel causing fruit to spill onto the interstate. 

Source: http://sanfrancisco.cbslocal.com/2014/07/28/big-rig-collides-with-banana- 
truck-on-i-580-in-livermore-causing-maior-delays/ 

8. July 28, KPIX 5 San Francisco - (California) Both directions of Highway 85 
reopened in Cupertino after down power lines snarled traffic. A section of 
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Highway 280 in Cupertino was closed for approximately 2 hours July 28 while crews 
cleaned up downed power lines likely due to a blown transformer that caused the lines 
to collapse and catch fire. 

Source: http://sanfrancisco.cbslocal.com/2014/07/28/both-directions-of-highwav-85- 
closed-in-sunnyvale-due-to-fallen-power-lines-homestead-road/ 

9. July 28, WBIW 1340 AM Bedford - (Indiana) Two injured, 16 tons of gravel dumped 
on highway. Two people were injured and over 16 tons of gravel was dumped onto 
State Road 54 West in Springville July 25 when a dump truck collided with a vehicle 
and went off the roadway causing it to overturn. Authorities spent several hours 
cleaning up the roadway. 

Source: http://www.wbiw.com/local/archive/2014/07/one-iniured-16-tons-of-gravel- 
dumped-on-highway.php 

10. July 26, Associated Press; WSAZ 3 Huntington - (West Virginia; Virginia) All lanes 
back open after tunnel fire on 1-77. Southbound lanes of Interstate 77 in Bluefield 
reopened July 25 after closing for several hours due to a semi-truck that caught fire 
inside the East River Mt. Tunnel. All northbound lanes of Interstate 77 reopened July 
26 after officials cleared the black smoke and debris. 

Source: http://www.wsaz.com/home/headlines/Tunnel-Fire-Detours-T77-Traffic-at- 
WVaVa-Line-Massive-Backup-Reported-268672102.html 

1 1 . July 26, Greenville News - (South Carolina) 3 cars carrying highly flammable 
ethanol jump the train tracks in Spartanburg. An engine and four cars, three of 
which were carrying highly flammable ethanol, derailed from a CSX train in 
Spartanburg July 25 causing them to overturn. Authorities are investigating the incident 
and crews will lift and move the train cars July 28. 

Source: http://www.thestate.com/2014/07/26/3585452/3-cars-carrying-highly- 
flammable.html 



12. July 25, WNCN 17 Goldsboro - (North Carolina) 2 of 3 teens wanted in Durham bus 
explosion turn themselves in. Two of the three teens wanted in connection with a July 
22 homemade chemical bomb explosion on a Durham bus turned themselves in to 
police July 24. 

Source: http://www.wncn.com/story/26113132/2-of-3-teens-wanted-in-durham-bus- 
explosion-tum-themselves-in 
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Food and Agriculture Sector 

13. July 26, U.S. Department of Agriculture - (National) Massachusetts firm recalls raw 
boneless turkey breasts due to misbranding and undeclared allergen. The Food 
Safety and Inspection Service announced July 26 that Boston-based Puritan Foods Co., 
Inc., issued a recall for about 2,476 pounds of Raw Boneless Turkey Breasts with pack 
dates of June 1 1 and July 18 due to undeclared milk caused by misbranding. The 
product was sent to a local distributor that sold the product to hotels, restaurants, and 
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other institutions in the New England region. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 4/recall-049-20 1 4-release 



14. July 25, York County Coast Star - (Maine) Bomb threat leads to evacuation at York 
Hannaford. A Hannaford supermarket in York was evacuated and closed July 25 due 
to a bomb threat that was phoned in to the front desk of the store. Police searched and 
cleared the scene 2 hours later after no evidence of a bomb was found. 

Source: 

http://www.seacoastonline.com/apps/pbcs.dll/article?AID=/20140725/NEWS/1407297 
8 9/- 1 /NEW S MAP 



15. July 25, Baltimore Sun - (Maryland) Seven hurt after car crashes into Andy 

Nelson's in Cockeysville. Seven people were injured July 25 when the driver of a car 
involved in a 3-vehicle accident lost control of the vehicle and crashed into an outdoor 
seating area and the front steps of the Andy Nelson’s Barbecue restaurant in Baltimore 
County. No structural damage was reported but the restaurant was closed for several 
hours while authorities investigated and crews cleaned the scene. 

Source: http://www.reuters.com/article/2014/07/25/us-usa-maryland-accident- 
idUSKBN0FU25C20140725 



For additional stories, see items 7 and 22 
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Water and Wastewater Systems Sector 

16. July 28, KKTV 11 Colorado Springs - (Colorado) Boil order in place after fire in 
Victor. Residents of Victor and Goldfield were placed under a boil water advisory until 
further notice after a fire broke out at the Mining Union Hall July 26 causing fire crews 
to run untreated water from the reservoir through the water system to battle the blaze. 
Source: http://www.kktv.com/home/headlines/Lighting-Likelv-Cause-of-Structure- 
Fire-in-Victor-268793 14 1 .html 

17. July 26, Tennessean - (Tennessee) $14M Spring Hill sewer plant expansion 
complete. Officials reported that the $14 million expansion of Spring Hill’s wastewater 
treatment plant is near completion after being delayed for 7 months. Georgia-based P.F. 
Moon & Co., was ordered by the city to pay over $100,000 in fines for running past its 
contracted completion date, which will be deducted from its final payment. 

Source: http://www.tennessean.com/storv/news/local/williamson/spring- 
hill/2014/07/27/spring-hills-m-sewer-plant-expansion-complete/l 3229 195/ 
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Healthcare and Public Health Sector 



18. July 28, WTHR 13 Indianapolis - (Indiana) DEA serves search warrants at several 
Indiana clinics. Four doctors, an attorney, and several clinic employees were among 



the 1 1 allegedly involved in handing out prescription drugs for cash throughout clinics 
across several Indiana counties. The illegal drug operation was reportedly based in an 
office in Carmel and included four other sites where patients would receive 
prescriptions without any exams in exchange for cash. 

Source: http://www.wthr.com/storv/26112815/2014/07/25/dea-serves-search-warrants- 
at-several-indiana-clinics 

For another story, see item 20 
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Government Facilities Sector 

19. July 27, KCPQ 13 Tacoma - (Washington) Carlton Complex fire burns 391 square 
miles, hundreds of homes. Crews reached 59 percent containment July 27 of the 
250,514-acre Carlton Complex Fire which has destroyed an estimated 300 homes in 
north-central Washington. Firefighters also reached 25 percent containment of the 
Chiwaukum Complex Fire in Chelan County which has burned 12,320 acres. 

Source: http://ql3fox.corn/2014/07/26/300-homes-lost-in-carlton-complex-fire-now- 
5 9-contained-interacti ve-map/ 

20. July 27, Softpedia - (International) Englishman indicted for stealing thousands of 
U.S. government employee records. A man from England was indicted July 24 in the 
Eastern District of Virginia for offenses that enabled him to access sensitive 
information belonging to more than 100,000 federal government employees by 
breaching the systems of the U.S. Department of Energy, the U.S. Sentencing 
Commission, FBI’s Regional Computer Forensics Laboratory, and Deltek, Inc., among 
several others. The man was able to exploit a security vulnerability in Adobe 
ColdFusion gaining administrator-level access to the networks using custom file 
managers. 

Source: http://news.softpedia.com/news/Englishman-Indicted-for-Stealing-Thousands- 
of-US-Govemment-Employee-Records-452280.shtml 

21. July 27, KCRA 3 Sacramento - (California) Crews make progress against Sand Fire; 
containment at 50%. Crews reached 50 percent containment July 27 of the 3,800-acre 
Sand Fire that has destroyed 13 homes and 38 outbuildings in Plymouth, California, 
and prompted the evacuation of 1,200 people from the Sierra Nevada foothills. 

Source: http://www.kcra.com/news/local-news/news-sierra/more-evacuations-as- 
wildfire-continues-to-burn-near-plymouth/27161148 

22. July 26, Associated Press - (Colorado) Colorado wildfires: Containment expected 
Sunday on Alkali fire. The 20,000-acre Alkali Fire burning in northwestern Colorado 
was 75 percent contained July 25 with full containment expected by July 27. The fire 
destroyed a barn, cabin, and propane tank. 

Source: http://www.denverpost.com/news/ci 26216989/colorado-wildfires- 
containment-expected-sunday-alkali-fire 
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Emergency Services Sector 

23. July 27, Ithaca Journal - (New York) Ambulance corps bookkeeper charged in 
theft. The South Seneca Community Volunteer Ambulance Corps bookkeeper was 
arrested and charged in connection to stealing $163,849 from the New York 
organization for personal use for roughly 2 years. Authorities are still investigating the 
theft. 

Source: http://www.democratandchronicle.com/storv/news/2014/07/27/arnbulance- 
corps-bookkeeper-charged-theft/13236035/ 
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Information Technology Sector 

24. July 28, Softpedia - (International) XSS flaw fixed in Barracuda Spam and Virus 
Firewall. Vulnerability Laboratory researchers discovered a non-persistent cross-site 
scripting (XSS) vulnerability in the Barracuda Spam and Virus Firewall web 
application affecting versions 5.1.3 and earlier that allowed a potential attacker to 
hijack session information or execute a non-persistent code. The vulnerability was 
patched July 15 after researchers notified the developer. 

Source: http://news.softpedia.com/news/XSS-Flaw-Fixed-in-Barracuda-Spam-and- 
Virus-Firewall-452377.shtml 



25. July 26, Softpedia - (International) Remotely exploitable flaws fixed in Siemens 
SCADA system. Siemens patched 5 vulnerabilities discovered in its SIMATIC 
industrial automation system, four of them presenting remote exploitation risk, after 
an advisory by the Industrial Control Systems Cyber Emergency Response Team 
(ICS-CERT) which explained that the flaws resided in the SIMATIC WinCC product 
which is a supervisory control and data acquisition (SCADA) system. 

Source: http://news.softpedia.com/news/Remotelv-Exploitable-Flaws-Fixed-in- 
Siemens-SCADA-System-452219.shtml 



26. July 25, Softpedia - (International) XML-RPC abused in brute-force attacks 

against WordPress sites. Sucuri researchers found new brute-force attacks delivered 
against WordPress Web sites leverage the XML-RPC protocol and the 
wp.getUersBlogs function have increased since July 4 with 2 million attempts 
originating from 17,000 different IP addresses. 

Source: http://news.softpedia.com/news/XML-RPC-Abused-In-Brute-Force-Attacks- 
Against-WordPress-Sites-452143.shtml 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

27. July 27, Juneau Empire - (Alaska) ACS restores service to southeast customers. 
Internet and cell phone service was restored July 26 to Alaska Communications 
customers in southeast Alaska after an underwater fiber optic cable was severed due to 
an earthquake July 25. Other network carriers were able to provide service to customers 
while crews continued work to repair the cable. AT&T cell service was also down due 
to the damaged cable that hindered service for several hours. 

Source: http://iuneauempire.com/local/2014-07-25/acs-restores-service-southeast- 
customers 
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Commercial Facilities Sector 

28. July 28, KOLO 8 Reno - (Nevada) Car hits two apartment buildings, causing gas 
leak. Residents from 16 units in 2 buildings at the Peckham Gardens Apartment 
complex in Reno were displaced July 28 after the driver of a vehicle lost control and 
crashed into the structures, causing a gas leak. NV Energy officials shut off gas service 
to the buildings while crews secured the scene. 

Source: http://www.kolotv.com/home/headlines/Car-Hits-Two-Apartment-Buildings- 
Causing-A-Gas-Leak-268765211.html 

29. July 28, WNEP 16 Scranton - (Pennsylvania) Water main break in Lackawanna 
County. Several businesses in an industrial park in Lackawanna County were without 
water service for several hours July 28 when a 12-inch water main broke in 
Carbondale. 

Source: http://wnep.com/2014/07/28/water-main-break-in-lackawanna-county-3/ 

30. July 28, Fox News - (Massachusetts) Alcohol big problem at show. Emergency 
responders declared a mass casualty incident at the Xfinity Center in Mansfield during 
a July 26 concert after police took more than 50 individuals into protective custody, and 
46 individuals were treated at the scene and 22 others were transported to area hospitals 
for issues related to alcohol. 

Source: http://www.inquisitr.com/1377225/keith-urban-concert-becomes-mass- 
casualtv-event-46-treated-for-alcohol-poisoning/ 

31. July 28, CNN - (California) One dead, 13 injured after lightning strikes at Southern 
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California beach. One person was killed and at least 13 others were injured July 27 
when a lightning bolt struck the water and beach at Venice Beach in Los Angeles. 
Lightning also struck near a golf course on Catalina Island, injuring one individual. 
Source: http://www.reuters.com/article/2014/07/28/us-usa-lightning- 



idUSKBN0FW0TJ20140728 



32. July 27, WKYC 3 Cleveland - (Ohio) Two injured after cable snaps on Ohio 
amusement park ride. Two patrons were injured on the Skyhawk ride at the Cedar 
Point amusement park in Sandusky July 26 when a cable on the swing ride snapped and 
struck the individuals as the ride was in motion. Cedar Point officials closed the ride 
indefinitely while authorities investigate the incident. 

Source: http://www.reuters.com/article/2014/07/27/us-usa-ohio-amusementpark- 
idUSKBN0FW0MX20140727 



33. July 27, WBZ 4 Boston; Associated Press - (Massachusetts) 9-alarm fire roars 
through three Cambridge three-deckers. A 9-alarm fire that broke out July 27 inside 
a vacant building in Cambridge spread to 3 apartment buildings, destroying 5 
multifamily residences and rendering 15 units uninhabitable. Twenty-nine residents 
were displaced by the fire. 

Source: http://boston.cbslocal.com/2014/07/27/9-alarm-fire-roars-through-three- 
cambridge-three-deckers/ 

34. July 27, Arizona Republic - (Arizona) Man accused of setting fire to 2 kiosks in 
Phoenix mall. Police arrested July 27 a suspect who allegedly threw rocks at the 
windows of a movie theater inside the Desert Sky Mall in Phoenix, then used a lighter 
to set fire to a gift-card stand and two kiosks inside the mall, causing minor damage. 
Police found and arrested the suspect inside a nearby Walmart store after receiving 
reports that the man was swinging a rubber mallet at employees and shattering 
windows inside the store. 

Source: http://www.azcentral.com/storv/news/local/phoenix/2014/07/28/phoenix-man- 
accused-mall-fires-walmart-abrk/1 325 8023/ 



35. July 27, Maryville Daily Times- (Tennessee) Bomb threat evacuates Maryville 
Walmart. A Walmart store in Maryville was evacuated for about 2 hours July 26 after 
a man called the Blount County 9-1-1 center and reported placing multiple bombs 
inside the store and the Murphy USA gas station located in front of it. Authorities 
cleared the scene after no explosive device was found. 

Source: http://www.thedailytimes.com/news/bomb-threat-evacuates-rnarvville- 
walmart/article 95239705^61 )36-5e 1 f-8d47-0( I8f9aa327c2.html 

36. July 24, Mineola Patch - (New York) 5 alarm early-morning fire ravishes Williston 
Park stores. Authorities are investigating the cause of a 5-alarm fire that damaged five 
stores and caused a partial roof collapse to four of the shops in a Williston Park strip 
mall July 24. 

Source: http://patch.com/new-vork/mineola/5-alarm-earlvmorning-fire-ravishes- 
williston-park-stores 
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Dams Sector 

Nothing to report 
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NTAS 

A^viwfT 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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